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1.  INTRODUCTION 


Let  X^,  . ..,  be  theoretical  failure  times  of k components 
of  a series  system;  that  is,  if  the  system  were  to  continue,  the 
ith  component  would  fail  at  time  X^.  The  system  fails  when  the 
first  component  fails  so  that  failure  times  of  the  other  components 
become  unobservable.  Only  the  system  failure  time , U = min(X^,  . ..,  X^)  , 
and  the  component  or  components  which  caused  the  failure  are  observable. 
The  com.iguration  of  components  causing  the  failure  is  called  the 
failure  pattern , we  describe  it  in  more  detail  later. 

Problems  of  this  type  have  arisen  in  two  diverse  applications. 

First,  in  the  context  of  actuarial  science,  Cornfield  (1957),  Kimball 
(1958),  Chiang  (1968),  and  Berkson  and  Elveback  (1960)  use  the 
"competing  risk  model"  in  the  preparation  of  life  tables  for  bio- 
logical populations;  Moeschberger  and  David  (1971)  discuss  applications 
of  the  competing  risk  model  and  consider  the  problem  of  estimating 
parameters  of  the  underlying  life  distributions. 

Second,  problems  having  the  same  mathematical  structure  occur 
in  connection  with  the  reliability  and  safety  of  engineering  systems. 
Marshall  and  Olkin  (1967) , Arnold  (1968) , and  Bemis,  Higgins  and 
Bain  (1972)  are  papers  which  appear  to  be  motivated  by  engineering 
applications. 
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1.1  Survival  Times  and  Functions 


I 


Let  X denote  survival  time,  i.e.,  the  length  of  time  until  a 
particular  functioning  object  fails  to  function  properly.  Once  the 
object  fails  it  stays  in  that  state,  we  are  not  considering  it  to 
be  repairable.  Except  for  the  intuitive  background,  in  this  article 
one  may  think  of  survival  time  as  meaning  simply  a non-negative 
random  variable  (r.v.).  The  survival  function  of  X, 

F (x)  = P [X  > x]  ; x >_  0 , 

is  the  probability  that  the  object  survives  at  least  x units  of  time. 

As  a consequence  of  the  frequency  intepretation  of  probability, 

F(x)  is  also  the  proportion  of  a large  population  which  will  survive 
till  age  x.  Thus,  as  Grubbs  and  Shuford  (1973)  have  done  in  constructing 
a probabilistic  theory  of  combat,  if  interactions  between  the  strengths 
of  the  two  armies  are  ignored,  then  the  proportions  of  combatants 
on  each  side  surviving  at  time  x can  be  estimated  by  F(x). 

This  article  treats  two  or  more  survival  times  jointly,  par- 
ticularly when  they  are  dependent.  If  X and  Y are  survival  times, 
then 

F(x,y)  = P[X  > x,  Y > y];  x,y  >_  0, 
is  their  joint  survival  function . Joint  survival  functions  for 
more  than  two  objects  are  defined  in  an  analogous  manner. 

Possible  applications  of  joint  survival  functions  are  suggested 
by  the  following  examples.  First,  denoting  the  life  times  of 
husband  and  wife  by  X and  Y,  respectively,  an  insurance  company 
sellirg  an  annuity  will  be  interested  in  the  bivariate  survival 
function.  Second,  the  two  engines  of  a twin-engine  airplane  can 
fail  separately  or  simultaneously;  the  joint  survival  function  is 


\ 
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important  in  safety  considerations.  Third,  for  traffic  congestion 
stud  cs  one  is  interested  in  the  time  gaps  between  cars  on  a two 
lane  or  multilane  highway. 

The  exponential  distribution 

F(x)  =0,  x < 0,  F(x)  - 1 - e“Xx,  x > 0 (1.1) 

has  proved  useful  as  a model  for  life  testing,  see  Epstein  and  Sobel 

(1953) , but  it  has  a "no  aging  property"  which  is  peculiar  in  this 
context.  If  the  r.v.  X is  exponential  then 
P[X  > x + A|  X > x]  = P[X  > A] 

for  all  x >_  0,  A > 0.  That  is,  in  a probability  sense,  residual  life 
is  independent  of  age. 

Obviously  many  objects  age,  i.e.,  become  more  prone  to  vailure, 

as  they  become  older.  Some  actually  strengthen  as  they  get  older, 

e.g.,  some  electronic  circuits  and  many  new  mechanical  devices. 

% 

The  concept  of  failure  rate  plays  a role  at  this  point.  Let 
X be  a non-negative  random  variable  with  density  f (x) , distribution 
function  (d.f.)  F(x),  and  survival  function  F(>:)  = 1 - F(x).  The 
failure  rate  is 

r(x)  - (log  F (x) ) . (1.2) 

F (x)  ax 

Alternatively  we  may  write 

x 

F(x)  = exp  [-  / r (t ) dt] . (1.3) 

0 

The  failure  rate  is  useful  and  has  a meaningful  interpretation,  for 
r(x)Ax  represents  approximately  the  probability  that  an  object  of 
age  x will  fail  in  the  interval  [x,  x + Ax]  . 
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Barlow  and  Proschan  (1965)  introduce  monotone  failure  rates  as 
follows. 

Definition.  A nondiscrete  univariate  distribution  F(x)  is  IFR  (DFR) 
if 

P(X  > x + A|  X > x)  = 

F(x) 

is  decreasing  (increasing)  in  x for  every  fixed  A > 0,  x ^ 0 such 
that  F (x)  > 0. 

If  F!j.)  has  a density  and  F (0-)  = 0,  then  F(x)  being  IFR  (DFR)  is 
equj valent  to  the  failure  rate  r(x)  of  (1.2)  being  increasing 
(decreasing)  . 

Some  distributions  which  have  been  important  in  life  studies 
are  i)  the  exponential  with  constant  failure  rate  ii)  the  Weibull, 
with  r(x)  = poxa  * and  iii)  the  Gompertz  with  r(x)  = B exp(cx); 

B,C  > 0.  Makeham's  formula,  r(x)  = A + B exp(Cx);  B,C  > 0,  has 
been  important  in  the  theory  of  life  insurance. 

1.2  Multivariate  Exponential  Distributions 

Since  the  exponential  distribution  plays  a crucial  role  in  many 
univariate  lifetime  problems,  we  are  concerned  with  multivariate 
extensions  of  it. 

The  simplest  multivariate  distribution  with  exponential  marginals 
is  composed  of  independent  exponential  distributions.  With  the  multi- 
variate hazard  rate  defined  as  r(x^,  ...,  x^) 

, ...  , x^) , the  hazard  rate  of  independent 
exponentials  is  obviously  constant.  Basu  (1971)  shows  that  the 
only  absolutely  continuous  bivariate  distribution  with  exponential 
marginals  and  constant  bivariate  hazard  rate  is  that  of  two  inde- 
pendent exponei  tials. 


= f (x1#  ...»  x^/F^ 
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Gumbel  (1960)  presents  a bivariate  discribution  with  exponential 
marginals  and  joint  survival  function 

G(x,y)  = e x ^ ^xy;  0 < i < 1;  x,y  >_  0. 

The  coefficient  of  correlation  for  this  bivariate  distribution  is 
either  negative  or  zero. 

Freund  (1961)  studies  the  following  model.  Suppose  that  two 
exponential  lifetimes,  with  parameters  a and  6 , function  inde- 
pendently until  the  first  failure.  At  failure  the  remaining 
lifetime  becomes  exponential  with  a new  parameter,  either  a' 
replacing  a or  6'  replacing  8.  This  may  realistically  represent 
a situation  where  two  components  perform  the  s ane  function,  and 
the  failure  of  one  component  puts  additional  responsibility  on  the 
remaining  one. 

Freund's  distribution  has  the  "no  aging  property" 

F(x  + A,y  + A)  = F (x,y)  • F (A,  A)  ; A,x,y  >_  0. 

But  F1(x),  the  marginal  distribution  of  X,  is  IFR  (DFR)  if  and 
only  if  a < a' (a  > a')  and  similarly  (y)  is  IFR  (DFR)  if  and  only 
if  8 < 6' (6  > 6*).  Since  the  hazard  rate  r(x)  of  an  exponential 
distribution  is  equal  to  its  parameter,  this  result  is  intuitive. 

Note  that  the  failure  rates  of  the  marginals  can  be  increasing, 
decreasing,  cr  even  monotone  in  opposite  directions. 

Marshall  and  Olkin  (1967)  derive  from  three  different  models 
a bivariate  distribution  which  has  exponential  marginals  and  joint 
survival  function 

F (x,y)  = exp{-  ^x  - *2y  - *12  max(x,y)}; 

« 
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x, y > 0;  We  ca^  t*1*8  class  of  distributions  the  j 

bivariate  exponential  distribution,  BVE,  and  its  extension  to  n 
variables  the  multivariate  exponential  distribution,  MVE. 

Marshall  and  Olkin  derive  the  BVE  through  a "fatal  shock" 
model,  a "non-fatal  shock"  model,  and  a "no  aging"  model.  In 
the  "fatal  shock"  model  three  independent  Poisson  processes,  with 
parameters  A^,A2>  and  A^2,  govern  the  respective  occurrences  of 
failures  of  component  one,  component  two,  or  both  components  in 
a two  component  system.  Their  "no  aging"  model  shows  that, 
analogous  to  the  univariate  exponential  distribution, 

F(x+A,y+A)=F(x,y)F(A,A);  A > 0;  x,y  ^ 0; 
i.e.,  P[X  > x + A, Y > y + A | X > x,Y  > y]  = P[X  > A , Y > A], 
with  exponential  marginals,  if  and  only  if  F(x,y)  is  BVE.  Allowing 
the  A's  to  differ,  they  show  that  F(x  + A^y  + A2)  = FfXjyJFtA^,  A2) 
for  all  positive  A1  and  A2  if  and  only  if  X and  Y are  independent 
exponential  r.v.'s. 

Marshall  and  Olkin  find  the  d.f.  (which  has  a line  of  singu- 
larity along  the  main  diagonal  of  the  first  quadrant) , the  moment 
generating  function,  moments,  and  several  characteristics  of  the 
BVE.  For  example  they  show  that  (X,  Y)  is  BVE  if  and  only  if 
there  exist  independent  exponential  r.v.'s  U,  V and  W such  that 
X = min(U,  W)  and  Y = min(V,  W).  Also  if  (X,  Y)  is  BVE,  then 
min(X,  Y)  is  exponential. 

Marshall  and  Olkin  also  have  a complete  discussion  of  the 

i 

MVE,  with  survival  function  given  by 


j 
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■ e*p<-  E Vi  " £i<jAij  ma!'(xi'xj) 

• Ei<j<kAijkmax(vxj'xl)  - ••• 


- __nmax(x1 **)) 

where  the  A's  are  non-negative  and  not  all  zero. 

2.  DEPENDENCE  AND  AGING  ASPECTS  OF  MULTIVARIATE  SURVIVAL 


The  theory  of  monotone  failure  rate  has  proved  useful  as  a 
probabilistic  model  of  univariate  survival  time,  particularly  in 
reliability  theory.  The  exponential  distribution  is  important  in 
this  theory  as  the  boundary  between  IFR  and  DFR  distributions. 

In  searching  for  multivariate  extensions  of  the  monotone  failure 
rate  idea,  the  "no  aging"  property  makes  it  appealing  to  require 
that  the  boundary  between  multivariate  IFR  and  DFR  should  be  the 
class  of  MVE  distributions.  Brindley  and  Thompson  (1973)  obtain 
this  result  for  the  following  generalization  of  the  monotone 
failure  rate  concept.  A multivariate  d, f , F(x^,  ...,  x^)  defined 
on  the  positive  orthant  is  IFR  (DFR)  if 

P(X^  > x^  + A,  ...,  Xy,  > x^  + A)  Ffx^  + A,  ...,  xk  + A) 
P(X1  ^ x^i  ...,  Xk  ^ xk ) F (x^,  ...,  xk ) 


is  decreasing  (increasing)  in  x^,  ...,  xk  for  each  A>0,  and  all 


9 •••  9 


\ - 


> 0 such  that  F(x.,  ...,  x.  ) > 0.  The  failure  times 


(non-negative  r.v.'s)  X^,  ...,  Xk  are  jointly  IFR  (DFR)  if  the 
d.f.  of  each  subset  of  them  is  IFR  (DFR). 

The  point  here  is  that  it  is  possible  for  F(x^,  ...,  xk)  to 
be  increasing  in  each  variable  and  yet  some  subset  of  X^  . ..,  Xk 
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may  have  a marginal  distribution  which  is  not  increasing  in  each 
.ariable.  For  example,  Freund's  bivariate  exponential  distribution 
has  the  no  aging  propeity  and  hence  is  IFR  but,  if  a > a', 

F^x)  will  be  DFR. 

In  the  definition  of  jointly  IFR,  the  requirement  that  each 
subset  of  the  variables  have  a property  is  reminiscent  of  the 
definition  of  independent  events 

Harris  (1970)  defines  a d.f.  F(x^,  ...,  x^)  to  be  multi- 
variate IHR  if  i.  F(x1#  . ..,  x^)  is  IFR  in  the  sense  of  the 
previous  paragraph  and  ii.  the  variables  . ..,  Xk  possess  a 
positive  dependence  property  called  right  corner  set  increasing  (RCSI) . 

In  the  bivariate  case,  RCSI  is  the  requirement  that 

P(X  > x ' , Y > y ' | X N x,  Y > y) 

be  increasing  in  x and  y.  The  RCSI  property  implies  the  series 
bound 

F(x,y)  >.  F1  (x)  F2  (y)  . 

Harris  obtains  several  results  for  IHR  variables  including  the 
property  that  subsets  of  IHR  r.v.s  are  IHR.  This  shows  that 
nu.1  tivariate  IHR  r.v.s  are  multivariate  IFR.  Gumbel's  distribution 
is  an  -xample  of  IFR  r.v.s  which  are  not  IHR;  the  series  bound 
need  not  hold. 

Positive  dependence  properties,  like  RCSI,  will  be  reasonable 
for  studying  the  life  times  of  components  all  subjected  to  the  same 
environment.  But  we  may  wisn  to  study  life  times  subject  to 
different  environments  and  there  are  several  other  types  of  positive 
dependence  which  imply  the  series  bo'md  and  are  as  intuitively 
appealing  as  RCSI.  For  example,  positive  likelihood  ratio 
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dependence  ancl  nositive  regression  dependence,  see  Lehmann  (1966) 
and  Dykstra,  Hewett,  and  Thompson  (1973)  also  imply  the  series 
bound.  Further  the  parallel  definition  of  DHR  is  disappointing 
in  that  the  boundary  between  IHR  and  DHR  consists  of  independent 
exponential  distributions 

Finally,  there  is  no  reason  why  aging  and  positive  dependence 
need  go  together.  If  X and  Y are  r.v.s  uniformly  distributed  on 
the  triangle  with  vertices  (0,0),  (0,1),  and  (1,0),  then  X and  Y 
are  jointly  IFR  but  they  exhibit  a negative  dependence  property 
which  we  may  call  right  corner  set  decreasing.  Dependence  and 
aging  are  in  fact  orthogonal  properties. 

Since  dependence  logically  need  not  accompany  monotone  failure, 
such  concepts  need  not  be  included  in  multivariate  extensions  of 
univariate  monotone  failure  rate.  Multivariate  IFR  and  DFR  as 
defined  by  Brindley  and  Thompson  (1973)  are  strictly  aging 
concepts  which  lead  to  a symmetric  theory,  and  the  MVE  distributions 
form  the  boundary  between  them.  Sets  of  minimums  of  IFR  lifetimes 
are  IFR,  and  Harris'  IHR  distributions  form  a substantial  subclass 
of  the  IFR  distributions. 

3.  INDEPENDENT  COMPONENTS 
3 . I Independence  Model 

The  initial  systems  to  be  considered  are  those  consisting 
of  independent  components.  The  model  is  as  indicated  in  Figure  1. 
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Figure  1 

Theoretical  Failure  Times  for  Independent  Components 


component  1 
component  2 

component  k 
system 


time 


Denoting  the  survival  functions  of  U and  X^  by  G and  F (i=l,  . ..,  k)  , 
we  have  u = min(X^,  . ..,  X^)  and 
k 

G(x)  = n F. (x) . ‘ (3.1) 

i=l  1 


It  is  well  known  that,  for  independent  components,  system 
failure  rate  is  the  sum  of  component  failure  rates.  In  fact,  from 
(1.2)  and  (3.1), 

. k , 

rU(x)  = " ^ (1°9  5(x)>  55  & {1°g  ?i(x))* 


k 

= Z r. (x) . (3.2) 

i=l  1 


The  probability  of  tied  values  is  zero  so  that  the  failure 
pattern  is  simply  which  one  of  the  components  causes  the  system 
to  fail. 

The  joint  probabilities  of  failure  time  and  failure  pattern 
are,  for  i=l,  ...,  k: 

P (U  > u,  X,  = U)  = P (u  < X.  < min(X.))  = f G(x)r.(x)dx. 

1 1 j^i  3 U 1 
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The  probability  that  the  ith  component  causes  the  system  to 
fail  is  P(X^  = U)  = ik,  say. 

00 

tt  . = / G(x) r.  (x)dx. 

1 0 1 

An  example  of  the  utility  of  these  ideas  appears  in  Vesely, 
Waite,  and  Keller  (1971).  They  are  concerned  with  the  design  of 
a safety  system  which  will  shut  down  an  atomic  reactor  should  it 
begin  to  go  out  of  control.  They  consider  a manual  as  well  as  an 
automatic  system  and  for  each,  they  estimate  reliabilities  from 
theoretical  considerations.  Estimated  component  reliabilities 
for  the  manual  system  appear  in  Table  1.  From  this  Table  they 
conclude  that,  effort  to  improve  reliability  of  the  manual  system 
should  center  on  relays  and  console  switches;  improvement  of 
reliability  of  terminals  and  connectors,  and  wires  does  not  pay 
off  in  improved  system  reliability. 

Table  1 - Manual  Control  System 


Component  n 's 


Relay-'  (8)  .6477 
Conso.  e Switches  (2)  .3076 
Terminals  and  Connectors  (27)  .0262 
Wires  (76)  .0185 


The  conditional  survival  function  of  system  life  given  that 
the  ith  component  caused  failure  is 

-1  CO 

Gfu^  = U)  = TK  /u  G(x)ri(x)dx, 
and  the  conditional  density  is 

g(u|xi  = U)  = ik"1  G(u)r.(u).  (3.3) 
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This  is  equation  (2.5)  of  Moeechberger  and  David  (1971).  From 

4 

equations  (1.3)  and  (3.3)  we  obtain 


Fi(x)  = exp 


[-\J 


x g(u|x.=U) 


du 


G (u) 


t , i=l,  . . . , k. 


(3.4) 


Thus,  as  Berman  (1963)  has  observed,  the  distribution  of  failure 
time  and  failure  pattern  uniquely  determines  that  of  the  component 
lifetimes. 

3.2  Proportional  Failure  Rates 


For  two  series  systems  of  independent  and  identical  components, 

kl 

consisting  of  and  k^  components  respectively,  then  r^x)  = r2(x) 


rx(x)  = 6ry(x) 


In  general  we  say  that  X and  Y have  proportional  failure  rates  if 
there  exists  a constant  0 > 0 such  that 

(3.5) 

X 

for  all  x >_  0. 

The  assumption  of  proportional  failure  rates  for  the  component 
lifetimes  of  a series  system  has  occurred  several  places  in  the 
literature.  See  Allen  (1963) , David  (1970) , Sethuraman  (1965) 
and  Nadas  (1970) . We  may  summarize  the  results  concerning  pro- 
portional failure  rates  as  follows. 

Theorem  1.  For  continuous  and  independent  X^,  ...,  X^,  the 
following  are  equivalent: 


i) 

X,  , ... 

ii) 

r^x)  = 

iii) 

Fi(x)  = 

iv) 

failure 

X^  have  proportional  failure  rates 


U' 


U 


(3.6) 

(3.7) 


iv)  failure  time  is  independent  of  failure  pattern  and 
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T 


v)  there  is  a common  transformation  h so  that  h(X.),  . ..,  h(Xv) 

are  independent  exponential  r.v.s. 

Proof.  Clearly  ii)  implies  i) , but  also  i)  implies  ii) . 

For  if  r.  (X)  = 0..r.(x)  with  G.  . > 0 for  i jt  j then  rM(x)  = r.(x)*0  . 

i]  J ij  U DO 

where  0 . = E 0 . . and 
O < ID 


nj  = G (x) r j (x) dx  = . 

• j 

The  equivalence  of  ii)  and  iii)  is  a result  of  (1.2)  and  (1.3). 
The  equivalence  of  ii)  and  iv)  follows  from  (3.3).  We  have 


g (u|x.  = u) 
r.  (u)  = n. 

X 1 - 


G(u) 

Hence  ri(u)  = ni'ru(u)  if  and  only,  for  i-1,  ...,  k,  g(u|xi  = U)  = g(u), 
the  density  function  of  U. 

Now  iii)  implies  v)  where  the  transformation  h is  given  by 


h (x)  = I r (t) dt . 

0 U 

Note  that  h is  continuous  and  ncn-decreasing. 

From  (1.3) , 

f\(x)  = [G(x))ni  = exp  [-ILh(x)  ] . 

Let  = h(Xi)  and  h 1 ( z ) = inf {x:h (x) >z } . 

Fy  (y)  = P(Yi>y)  = P[h(X.)>y] 

= P[Xi>h~1(y)]  = F i [h-1  (y ) ] 

= exp{-n  . h [h  1(y)]}  = expl-.Ky), 
which  is  the  survival  function  of  ai  exponential  r.v. 
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Finally  v)  implies  i) , since 

Fi(x)  = P(Xi>x)  = P[h(X.)>h(x)] 

= Fy  (h (x) ) = exp{-0^h (x)  } . 
where  h is  the  assumed  trc.nsformation.  Tnus 

ri<x)  ■ - S [1og  <*> i - ei  H • 

In  the  case  of  proportional  failure  rates  we  have 

_1 

71  ■ 

G = 1 ; i=l,  . . . , k. 

If  some  is  small,  then  these  equations  make  it  appealing  to 
assume  that  the  distribution  of  U can  be  well  approximated  by  ; 
limiting  extreme  value  distribution.  For,  if  tt  . ^=n  then  G«=F\n 
is  the  survival  function  of  the  minimum  of  n independent  r.v.s. 
all  having  d.f.  F^ . 

The  possibilities  appear  in  Table  10.2  of  Thompson  (1969). 

The  Cauchy  type  limit  assigns  no  probability  to  positive  values 
and  hence  is  unacceptable  as  a distribution  of  failure  time.  The 
exponential  type  would  imply  that  lifetimes  could  be  negative  as 
well  as  positive.  Clearly  the  limited  type  with  lower  limit  zero 
is  the  most  appropriate  choice  of  distribution.  The  limited  type 
with  that  limit  is  the  Weibull  which  has  density. 

i a 

, . a-1  -ou  . 

w(u)  = p a u e , p,a  > 0. 

4.  DEPENDENT  COMPONENTS 
4 . 1 Dependent  Component  Model 

Marshall  and  Olkin  characterize  their  MVE  in  terms  of  sets  of 
minima  of  exponential  r.v.s.  We  may  use  this  idea  as  one  way  to 
introduce  dependence  among  component  lifetimes.  The  components 
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causing  the  system  to  fail  can  be  indicated  by  a random  vector 


V * (V^,  . ..,  V^)  where  equals  1 or  0 according  as  the  ith 
component  is  or  is  not  failed.  The  sample  space  S of  values  which 

V can  assume  contains  2 -1  elements  since  the  zero  vector  is 

excluded.  If  V=s  where  s e S then  we  say  that  the  system  has 

exhibited  failure  pattern  s.  We  assume  a collection  of  independent 

and  continuous  r.v.s  (Z  : s e S}  where  Z is  the  theoretical  time 

s s 

of  occurence  of  failure  pattern  s. 

Now,  the  theoretical  failure  time  of  the  ith  component  is 

X.  = min  (Z  );  i=l,  ...»  k (4.1) 

X s 

{s:s^=l} 

and  system  failure  time  is 

U = min(X X,  ) = min(Z  ).  (4.2) 

1 * s eS  s 

We  wish  to  observe  that  David  (1973)  has  also  suggested  the  model 
(4.1)  . 

For  the  bivariate  case,  the  model  is  indicated  in  Figure  2. 

Figure  2 

Theoretical  Failure  Times  for  Bivariate  Dependent  Components 


Let  G and  F denote  the  survival  functions  of  U and  Z 
s s 

respectively,  and  let  tt  be  the  probability  of  failure  pattern  s; 

s 

G(z)  = n F (z)  (4.3) 

seS  5 

and 


tt  = p<v  = s)  = P(ZD  = U) 

S 3 


(4.4) 


Let  rM,  i.,  and  r be  the  failure  rate  functions  of  U, 

U'  i'  s ' 

X^,  and  Zg  respectively.  We  have 

r . (x)  = E r (x)  and  ^..(x)  = E r (x) 

1 5 U _ S 

{s:s^=l} 

but  there  will  be  no  general  expression  of  r^  in  terms  of  {jr}. 

A special  case  of  an  observation  of  Harris  is  that 

{X1  > x^,  . . . , Xk  > x^}  = O (Zs  > yg} 

s e S 

where  yg  = maxfx^s^  ...»  xksk)  , seS.  Hence 


F(^^»  •••,  xk ) 


nc  w- 

seS 


(4.5) 


Note  that  X^ , ...»  Xk  have  multivariate  d.f.(4.5)  if  and  only 

if  there  exists  a collection  of  independent  r.v.s  (Zg:  s e S]  such 

that  X.  = min(Z  ).  Hence,  equation  (4.5)  is  an  alternative  way  of 
{s:s.=l} 

representing  the  dependent  component  model  of  this  section. 

The  marginal  distributions  of  (4.5)  have  the  same  form  as  the 
parent  distribution.  In  fact 


F(x,,  ...,  xm,  0,  0)  = II  Fc  [max(x1®1,  ...,  x^s^,  0,  ...,  0) 


m 


seS 


m m 


— Sjy  ...,  s^  s^ , ...,  s 


[max  (x.  s, , . . . , x s ) ] 
11  mm 


m 
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where  F 


sl'  Sm 


(x)  = 


3m+l‘ 


/ Sr 


Fs(x) 


However,  consider  generating  a bivariate  Weibull  distribution 
by  taking 

as 

F (t)  = exp [-p  t ] 

L 5 

tor  s = (0,1),  (1,0),  (1,1).  We  obtain 


v , a10  a01  , , “m 

F(x1,x2)  = exp  _pojx2  -P11(max(x1,x2)  ] 


(4.6) 


Note  that  (4.6)  differs  from  the  bivariate  Weibull  mentioned  in 
Marshall  and  Olkin  (1967)  and  discussed  in  Moeschberger  (1974  ); 
the  marginals  are  not  Weibull. 

For  the  conditional  density  of  system  failure  time  given 
failure  pattern  s,  using  (3.3),  we  obtain  the  expression 


g (u | V=s)  = tt  1G(u)  • r (u)  . 

S 5 


(4.7) 


Using  (4.7)  and  (1.3)  we  may  write  (4.5)  in  the  alternative  form 

fys  | 

F (x.  , ...,  x ) = exp[-Z  tt  J 9iulY--s>du] 


seS 


0 G(u) 


where  yg  = maxfx^s^,  ...,  x^s^) . Again,  the  distribution  of  failure 
time  and  failure  pattern  uniquely  determines  that  of  the  component 
survival  times. 

Brindley  and  Thompson  observe  that  sets  of  minimums  of  multi- 
variate IFR(DFR)  failure  times  are  multivariate  IFR(DFR).  Hence  if 
{ Zs : s e S}  are  univariate  IFR(DFR)  then  ...,  are  multi- 

variate IFR(DFR).  For  example,  component  failure  times  having  the 
bivariate  Weibull  of  (4.6)  will  be  multivariate  IFR  if  ot^g,  aoi' 
and  are  all  greater  than  1. 


- 574  - 


4.2  Proportional  Failure  Rates 


The  assumption  .if  proportional  failure  rates  in  the  model 
(4.5)  amounts  to 

rs<x)  = * ru(x),  s e S.  (4.8) 

That  is,  the  constants  of  proportionality  are  the  probabilities  of 
the  failure  patterns.  Now  from  (3.2)  and  (4.1), 

ri(x)  = 7ri  . r^x)  (4.9) 

where 

71.  = I 7TS  = P(X.  = U)  . 

1 {s:s^=l} 

By  summing  (4.9)  we  obtain,  as  a generalization  of  (3.2), 
k k 

r..(x)  = Z r . (x)  / Z tt.. 
i=l  i=l 


With  the  additional  assumption  of  (4.8),  the  dependent  component 
model  (4.5)  becomes 

77 


F(x.  , . . . , x.  ) * n (G  (y  ) ] 
1 * seS  S 


(4.10) 


where  yg  = maxfx^s^,  ...,  x^s^) . This  is  a joint  survival  distri- 
bution, for  the  k components  of  the  system,  which  is  similar  to 
that  of  Marshall  and  Olkin's  MVE.  In  fact,  if  we  take  G(t)  = exp  (-At) 
we  obtain  their  MVE  survival  function: 


F(x^,  ...,  x^)  = exp[-AZ  tt  max(x^s1,  ...,  x^s^)  ] . 

seS 

The  marginal  distributions  of  (4.10)  again  satisfy  (4.10) 
only  in  fewer  variables.  The  tt  ' s have  the  same  significance  and 
even  the  d.f.G  is  the  same.  For  example 
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- — ■ - — 


TT 

. M g 

F (x.  , x , 0,  ...,  0)  = n fG{max (x. s. , ...,  x s )]} 

lii  * m X X XII  XII 

ses 

7T  ' 

S ^ • S 

= n {G  [max  (x.  s.  , . ..,  x s )]} 

« ~ -*•  mm 

S,  , • • • 9 s 

1 m 

where  it'  = Z tt  , the  marginal 

1 ms.,  . . . , s,  1 m m+1  k 
m+1,  k 


probability  of  failure  pattern  (s^,  . ..,  sm)  among  the  first 
m components. 

Theorem  1 carries  over  directly  to  the  dependent  component 
model . 

Theorem  2.  For  continuous  and  independent  (Z  :scS},  the  • 

— " s 


following  are 

equivalent : 

i) 

{Zs: 

seS}  have  proportional  failure 

rates 

Si) 

rs(x) 

= II  • r^  (x)  , seS 

(4.8) 

iii) 

Fs(x) 

= [GyU)  ]ns  , S£S 

iv) 

failure  time  is  independent  of  failure  pattern 

and 

v) 

there 

is  a common  transformation  h so 

that  h (Z  ) , seS , 

are  independent  exponential  r.v.s. 


Since  U = min(Z  ),  and  the  events  {V=s}  and  {U=Z  } are 
ses  s s 

equivalent,  the  proof  is  exactly  as  in  Theorem  1 except  that 
(4.7)  is  used  instead  of  (3.3). 

As  an  example  of  Theorem  2,  consider  the  bivariate  Weibull, 
(4.6).  By  calculating  the  failure  rates,  we  see  that  failure  time 
and  pattern  will  be  independent  if  and  only  if  aio=aOl=all * Tllen 
from  (4.8)  , 

7Tio=pio// (pio+poi+pn) ' 7Toi=poi// ^ P01+P10+Pll^  ' and  7Tii=pn// (P01+P10 


+ P 


11 


) . 
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As  in  the  case  of  independence,  since  one  of  the  it's  will  be 
small,  the  equations 


G = F , seS 
s 

make  it  appealing  to  assume  that  the  distribution  of  failure  time 

is  well  approximated  by  a limiting  extreme  value  distribution. 

The  Weibull  seems  to  be  the  most  satisfactory  of  these. 

In  a sample  of  size  N from  (4.10),  let  Uj  and  denote  the 

time  of  failure  and  the  failure  pattern  for  the  jth  observation, 

j=l,  ...,  N.  These  are  the  only  observable  quantities,  and  from 

them  we  might  wish  to  make  inferences  about  the  distribution  of 

component  lifetimes.  In  such  a sample,  let  N be  the  number  of 

s 

occurences  of  pattern  s and  let  n be  an  observed  value  of  N . 

s s 

I N =N. 
seS  s 

Because  of  the  independence  between  failure  time  and  failure 

pattern,  the  joint  density  of  the  observations  IT  and  , 

j=l,  . . . , N is 

N n 

n g(u.)  • II  v 3 
j=l  ] seS  s * 

Incorporating  the  Weibull  choice  of  G into  this  equation,  the 
joint  density  of  the  observations  becomes 


(pa) 


N 


N 

n 

j=i 


a-l 


N 

Z a 

-pj=lUj  . 


n 


IT 

seS 


where  p,a>0  are  the  parameters  of  the  Weibull. 


(4.11) 
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Thus,  with  proportional  failure  rates,  we  may  assume  that 
system  failure  time  has  a Weibull  distribution  independent  of 
failure  pattern;  and  we  may  take  observed  failure  patterns  to 
have  the  multinominal  distribution  and  be  independent  of  the 
observed  failure  times. 

If  a=l,  then  (4.5)  yields  the  MVE  distribution  studied  by 

Arnold  (1968),  and  Bemis,  Higgins  and  Bain  (1972).  Then 

N N 

E U.  and  {N  } are  complete  sufficient  statistics  and  E U. 
i=l  1 s i=l  1 

has  a gamma  distribution. 

5.  TIME  DEPENDENT  FATAL  SHOCK  MODELS 

Marshall  and  Olkin  derive  their  MVE  distribution  from  three 
points  of  view,  including  tue  "fatal  shock"  model.  In  the 
univariate  case  this  model  would  hypothesize  that  shocks  arrive 
according  to  a Poisson  process  and  that  the  first  shock  destroys 
the  object.  Survival  time  would  have  the  exponential  distribution 
(1.1).  But  the  exponential  has  the  "no  aging"  property  which  is 
non-intuitive  for  many  applications.  How  might  we  alter  the  fatal 
shock  model  to  allow  age  dependent  reliability  behavior?  For 
example,  to  model  an  IFR  lifetime?  One  way  is  to  allow  the  process 
controlling  the  arrival  of  the  shocks  to  be  a non-homogeneous  or 
time  dependent  Poisson  process. 

A description  of  the  time  dependent  Poisson  process  can  be 
found,  for  example,  in  Parzen  (1962).  Let  N(t)  be  the  random 
number  of  shocks  to  the  object  in  time  t.  The  times  at  which  the 
shocks  occur  are  t^,  t2,  ...  where  0 < < t2  < ...  . The  inter 
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arrival  times  between  shocks  are 

T1  = Tl'  T2  = T2  " Tl'  '**'  Tn  = Tn  Tn-1'  •’*  * 

Axioms  of  the  Poisson  process  are: 

Axiom  0.  N(0)  = 0. 

Axiom  1.  Independent  increments : for  all  choice  of  indices 

t«<  t.  < . . . < t the  random  variables 
u 1 n 

N(tx)  - N(tQ),  N(t2)  - N*^),  ...  , N(tn)  - N(tn_1) 
are  independent. 

Axiom  2 . For  any  t > 0,  0 < P{N(t)  > 0}  < 1. 


Axiom  3 . For  any  t _<  0 

P(N  (t+h)  - N ( t)  > 2 }_  n 
P{N  (t+h)  - N (t)  = 1}  U* 

Axiom  4.  For  some  function  v(t),  called  the  intensity  function, 

1 - P(N(t+h)  - N(t)  = 0}_ 

lim  r = v>(t;  . 

h-*-0  h 

These  axioms  imply  that  N(t)  has  generating  function 


I'  (z,t)  = exp  [A  (t)  (z-1)  ] 


where 


X (t)  = j v (x)  dx. 
0 


Since 


P(TX  > t)  = P (N (t)  = 0)  = e'X(t) 


we  see  that  there  is  a one-one  correspondence  between  the  process 
and  the  distribution  of  T.  . 
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The  function  A (t)  has  the  interpretation  X ( t ) = E [N ( t ) ] . If 
v(t)  is  constant  we  obtain  the  ordinary  or  homogeneous  Poisson 
process  where  A(t)  = v • t. 

The  time  dependent  Poisson  process  can  be  transformed  into 
a homogeneous  Poisson  process.  In  fact,  the  process  (M(u)  , u ^ 0} 
defined  by 

M(u)  = N (A  * (u) ) , u ^ 0 
is  an  ordinary  Poisson  process  with 

E (M (u) ] = E [N ( A_1 (u) ) ] = A ( A-1 (u) ) = u. 

If  shocks  to  an  object  are  fatal  then  the  survival  time  of 
the  object  is  the  arrival  time  of  the  first  shock;  X = T^ . If 
shocks  arrive  according  to  a time  dependent  Poisson  process  then 
the  survival  function  for  the  object  is 
F (x)  = P(T1  > x)  = exp(-A(x)). 

The  failure  rate  of  X is  the  intensity  function  of  the  process: 
r(x)  = - ^ (log  F (x)  ) = v(x)  . 

Hence  by  specializing  the  intensity  function,  the  fatal  shock 
model  yields  all  of  the  usual  univariate  life  distributions  and 
failure  properties  as  special  cases.* 

The  neatness  of  this  result  was  not  inevitable;  it  is  a 
consequence  of  the  particular  model  assumed.  Renewal  theory  is 
another  common  way  of  modeling  reliability  problems.  But  as 


* 


Conversations  with  Larry  Crow  and  Lee  Bain  led  to  this  observation. 
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Gnedenko,  Belyayev,  and  Solovyev  (1969,  p.  105)  point  out  one 

must  be  careful  to  distinguish  the  failure  rate  of  X from  the 

renewal  density  of  the  process. 

Proceeding  now  to  the  multivariate  case,  we  see  that  the 

distribution  (4.5)  can  be  derived  from  a fatal  shock  model.  We 
Jc 

consider  that  2 -1  independent  random  shock  processes  are  operating 

and  that  a shock  occurring  in  the  process  labeled  (s^  ...,  s^) 

destroys  those  components  i,  for  which  s.=l.  The  r.v.  Z of 

i s 

Section  4.1  is  the  time  of  occurence  of  the  first  shock  in  the 

process  labeled  s.  As  before,  with  Xi  defined  by  (4.1),  the 

joint  survival  function  (4.5)  results. 

If  shocks  arrive  according  to  time  dependent  Poisson  processes 

then  (4.5)  becomes 


F(x  , ...,  x.  ) = exp [-  E 


/' 


v„(t)dt] 


seS  0 


(5.1) 


where  yg  max  (x^s^,  ...,  x^s^) , res,  and  v (t)  is  the  intensity 


function  of  the  process  labeled  s.  Also  v (t)  = r (t) , the  failure 

s s 

rate  of  Z . 

s 

We  have  already  seen  that  the  time  dependent  Poisson  process 
can  be  made  homogeneous  by  transformation.  In  the  fatal  shock 
model,  when  can  we  perform  a single  time  transformation  so  that 
all  shock  processes  are  homogeneous?  Answer:  in  the  case  of 

proportional  failure  rates. 

To  see  this,  first  suppose  that  r (x)  = II  r..(x),  s e S. 

. s s u 

ft 

Let  X(t)  = I rt.  (x)dx  and  M_(u)  = N (A  (u) ) , s e S.  We  have 

“0  u s _ i s 

E [M  (u)  ] = E [N  ( A*1  (u)  ] = [ X (U)  v (x)  dx  = II  A (A_1(u))  = II  u; 

S S Jq  5 b S 

and  the  Mg (u) , s £ S are  all  homogeneous  Poisson  processes. 
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Conversely,  suppose  M (u)  = N (h (u) ) , s e S are  independent 

s s 

homogeneous  Poisson  processes. 

P [h_1  (Z  ) > u]  = P[Zc  > h (u) ] 
s s 

= P [N  (h  (u)  ) = 0]  = P (M  (u)  = 0) 
s s 

= exp  (-0su) . 

Theorem  2 then  states  that  {Z  : s e S}  have  proportional  failure 

s 

rates . 
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